Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XD1HoodBiMInvRTxnJ-F8bz7E6g.roa
File:                     XD1HoodBiMInvRTxnJ-F8bz7E6g.roa (raw, json)
Hash identifier:          +MCC/E1hZWlDAFHm+uYLJWzIYP9eeKSUMfJFrwSc0Ks=
Subject key identifier:   5C:3D:47:A2:87:41:88:C2:27:BD:14:F1:9C:9F:85:F1:BC:FB:13:A8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018366FD23342857E8AABA9DA98EB2002E83
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XD1HoodBiMInvRTxnJ-F8bz7E6g.roa
Signing time:             Thu 22 Sep 2022 20:56:49 +0000
ROA not before:           Thu 22 Sep 2022 20:56:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202732
IP address blocks:        2a06:a005:1501::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:66:fd:23:34:28:57:e8:aa:ba:9d:a9:8e:b2:00:2e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 22 20:56:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5c3d47a2874188c227bd14f19c9f85f1bcfb13a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:74:90:df:17:5a:91:07:49:a2:cd:64:10:
                    4d:57:64:09:94:f6:12:f0:ec:94:d1:b8:6c:8e:67:
                    2f:83:21:14:e1:d8:2e:c1:5a:e3:5b:d6:61:d4:d4:
                    ea:6f:97:ab:73:98:12:8a:85:55:51:88:8c:ff:fb:
                    0a:f6:16:92:bf:7c:26:6d:6a:0c:1b:db:3f:ed:08:
                    4c:56:2b:a2:96:fb:e2:68:d6:aa:7d:f3:34:5a:ad:
                    17:69:c0:88:07:8f:a1:ae:e1:48:63:fc:6b:e6:6f:
                    42:37:87:53:c3:f3:95:5d:9f:08:87:a8:81:7c:c7:
                    9d:4f:fb:16:e4:cf:fc:d3:ae:54:8d:19:7a:f0:d7:
                    47:46:60:ac:59:87:e8:69:4c:8e:d8:2f:d5:dc:3b:
                    01:3a:74:a3:0d:d1:39:24:2c:d4:26:b9:a0:6e:6f:
                    a7:47:7f:57:b1:1e:3c:79:cc:60:bf:d7:e2:9b:ba:
                    0d:d9:67:b8:4b:52:46:cc:3d:db:74:20:bb:14:7b:
                    33:75:9a:b5:e8:87:94:d9:73:63:55:a2:b0:af:aa:
                    b9:d8:2c:22:ed:04:f2:7c:cc:e7:e0:4a:1c:b3:81:
                    9e:59:4f:32:19:96:a3:2b:89:d0:0b:92:b7:e7:a6:
                    a3:94:bb:9f:18:4d:b6:49:22:09:56:3d:aa:75:9d:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3D:47:A2:87:41:88:C2:27:BD:14:F1:9C:9F:85:F1:BC:FB:13:A8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XD1HoodBiMInvRTxnJ-F8bz7E6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1501::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:ca:61:48:ac:cb:63:cf:11:4c:ad:ab:9e:85:ad:0e:09:
         72:21:cf:d7:01:e0:14:e7:2d:72:10:24:28:39:c7:04:3f:b0:
         a7:40:b6:20:a9:29:7e:91:76:53:98:52:ca:73:87:68:a9:71:
         66:af:21:df:d5:ae:0b:35:de:61:93:e8:d7:bd:dc:7f:3b:1f:
         16:de:e0:ac:fd:03:f9:93:94:00:ee:73:31:57:8e:52:8d:49:
         a9:43:fe:5b:91:ea:a4:bb:64:48:8d:e5:44:f7:66:46:d3:19:
         41:24:63:46:5e:bc:e1:43:58:df:44:94:30:d6:78:b4:2f:22:
         64:b3:62:bd:f1:6f:95:98:31:b2:e1:63:ac:6b:51:42:29:e9:
         36:28:d1:b5:b5:13:39:68:7a:eb:b8:e3:a8:22:a6:70:c8:d6:
         4d:4c:42:49:6c:da:bc:17:f9:bc:75:2e:de:9d:80:c1:9b:77:
         72:8e:89:4b:17:8b:63:2d:db:e0:cf:c0:f0:8e:9e:ac:45:ee:
         71:94:0c:79:59:93:7f:5e:c5:92:bf:d9:e3:3a:99:a9:6b:42:
         84:c9:5e:7a:ae:c9:dc:65:34:7f:8b:88:8e:f7:f2:72:34:f4:
         c4:c8:5c:0d:a3:6f:03:12:0f:cc:44:4c:8e:5a:9f:6e:fb:e5:
         a2:cf:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----